개인정보 처리방침
Privacy policy

English privacy policy

Sairoom (app.truecouple.android) is operated by JejuBucketList · 명정욱. Privacy contact: db0192a@gmail.com. Effective September 5, 2026. Intended for adults 18+.

Information and purpose

We process display names, generated account IDs, conversation titles, entries, feelings, needs, AI consent, summaries, selected plans and check-ins to provide, save and restore conversations. No real name, email, phone or social login is required. Avoid unnecessary sensitive information. Reports include the AI result, reason and optional explanation for operator review, without separately attaching original entries. Email support includes your address and inquiry.

Sharing and device processing

Your invited partner sees your name, shared title, submission/consent status, summaries and agreement/check-in status. Original entries are not displayed directly but summaries can reflect them. Both must consent before AI processing. Withdrawal stops future generation and cannot recall transmitted or viewed information. Google ML Kit recognizes image text on your device. Images are not uploaded; recognized text is sent only when you choose to save it. Google ML Kit can send device/app information, per-installation identifiers, performance, error and feature-use metadata to Google over HTTPS for diagnostics and usage analytics. This diagnostic data does not include recognized text or image content. Google privacy policies apply. Drafts and daily notes are encrypted locally. We do not request contacts, location or microphone permission, collect advertising IDs, sell data or use ad/behavioral analytics SDKs.

Providers and international processing

Cloudflare, Inc. hosts the server and encrypted database and handles network information such as IP addresses over HTTPS. D1 was created in APAC; Cloudflare's global network may process requests internationally. Korea-only processing is not guaranteed. Groq, Inc., a US provider, receives both entries, feelings, needs and title over HTTPS upon a jointly consented AI request. We do not separately send names, credentials, invitation/recovery codes or images; information typed into entries may be included. Inference Zero Data Retention is enabled. Groq retains usage metadata that excludes input/output content. See the provider privacy/data links above. You can decline or withdraw AI consent; generation will be unavailable. To avoid server storage, use the example or local reflection without creating, joining or saving a conversation.

Security and retention

Traffic uses HTTPS. Names, conversations, results and reports are encrypted on the server; credentials/codes are hashed. The server can decrypt content; this is not end-to-end encryption. Records remain until deletion. Deletion removes the account, shared conversations and reports from the active database; encrypted recovery history may persist in Cloudflare D1 for up to seven days. Separate ongoing personal-data backups or report copies are not the default process. After disaster recovery, deletion requests must be reapplied before reopening service. Expired abuse counters are pruned in batches of up to 100 on valid registration, together with daily quota records older than seven days; cleanup may be delayed without these requests. Content logging and Workers observability are disabled. Provider security/service metadata follows provider policies. Support email is removed within 30 days after resolution under the operating procedure, unless legal retention is required.

Optional reusable sign-in keys

You may create a 43-character sign-in key; only its hash is stored on the server. It remains reusable until replaced, revoked, account deletion or one-time recovery. Signing in disconnects the previous device and invalidates its recovery code. Treat the key as a password; never share it.

Your choices

View/edit entries, withdraw consent, or use Settings → Delete all my data. Shared conversations disappear from both participants' journals. The external deletion page accepts a saved recovery code or sign-in key to delete server data; clear local notes separately in device/app settings. Ownership verification is limited without a connected device or recovery code. Contact db0192a@gmail.com for privacy requests; do not email codes or sensitive entries. Material policy changes are announced in the app and reflected in the effective date.